This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer File: vx9s1vq5XSQc2axfhfTQX53lj5s.cer (raw, json) Hash identifier: +0LlbfFvjfe7dUncsB2AbrugxAQ4JOYfewdEueGjCYo= Subject key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC79B1A99ABBEBE817F0435014B1D76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213172 IP: 91.217.240.0/24 IP: 2a07:8800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9b:1a:99:ab:be:be:81:7f:04:35:01:4b:1d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:fd:e3:a3:d1:24:b1:34:81:90:fe:78:64: e4:7d:0a:17:97:79:62:11:d4:67:af:9f:c0:ac:3c: cd:5c:f2:e1:26:d5:81:6d:b5:0e:85:1d:5f:70:f9: e4:56:7a:e0:d2:c7:9c:59:a0:4b:d3:3b:13:55:b4: f8:c2:07:1a:e8:ab:b3:ea:2c:b4:ce:a1:79:17:69: 13:36:f9:14:46:af:38:41:a0:23:5d:80:49:31:2f: d2:56:1b:23:c7:fc:f5:45:fb:75:c0:30:fb:dc:e1: 7c:71:9e:0e:90:f4:0d:ab:28:7d:29:c1:fb:c8:c5: 8d:87:8b:d5:43:8b:c5:91:5e:12:6d:c6:c6:b2:2d: e3:d3:b5:50:58:d1:db:ac:e9:d7:6b:e2:f9:83:24: 3b:c7:52:bf:14:7a:97:97:e3:c9:ff:16:63:97:02: 9b:e9:62:4d:22:18:c9:7e:18:de:19:05:d1:74:a4: 19:f9:e7:53:58:01:de:64:ea:48:23:6b:50:2a:37: 1f:23:51:62:ce:15:6e:92:b8:90:2c:b9:09:9f:bf: 92:05:6f:61:a1:cf:87:23:b9:04:b2:a5:6a:cb:f9: c4:38:c7:50:0c:68:9b:39:43:61:b6:0d:35:01:de: 4f:3d:c0:e9:8c:a9:52:e3:d8:67:01:6b:04:e0:0f: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.240.0/24 IPv6: 2a07:8800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213172 Signature Algorithm: sha256WithRSAEncryption 6f:88:89:d3:e2:3c:3c:77:d9:e9:1b:cf:fc:a6:27:fd:1a:45: ab:0c:9f:85:54:a9:d5:57:d3:81:21:1d:8b:44:f2:03:f0:6a: 16:e9:61:b6:d5:5c:2b:96:ec:62:70:e6:2e:44:ef:a4:9e:84: 6f:0d:ad:88:57:d8:ed:8c:33:16:0d:af:5d:94:6f:a0:c6:71: 82:a5:0d:51:50:a7:4a:70:49:d9:c3:d6:3c:f9:22:e1:04:cb: 5f:9a:5f:e7:b0:5b:14:53:00:f1:c2:02:5d:65:7b:03:c2:eb: 8c:7f:b7:4e:3c:5e:73:35:77:88:6a:21:c9:cd:da:96:fc:97: 2c:1a:bb:0d:05:61:b9:a5:2e:10:fc:ca:d2:0c:95:a6:53:05: 61:64:20:00:1b:cb:f4:32:4d:48:53:0e:46:cf:32:bd:b5:ca: 10:f3:19:63:ce:e8:54:3f:78:fb:6e:84:a1:9b:0b:8c:86:93: 4c:63:7b:62:5c:5e:35:51:dd:a4:a3:75:7c:e2:57:7b:22:1a: 23:5e:a3:70:ff:cd:d9:d0:88:7d:68:8a:11:f9:21:8e:ce:b7: 6f:73:8d:9b:fd:b9:d6:b4:26:e8:6a:cc:8d:f2:2b:26:c4:20: cf:6c:40:db:3f:87:28:f8:0a:ad:1b:a0:1b:37:a1:fd:52:d0: 34:e5:69:4b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x5samau+voF/BDUBSx12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjFmNmNkNmZhYjk1ZDI0MWNkOWFjNWY4NWY0ZDA1ZjlkZTU4ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xv946PRJLE0gZD+eGTkfQoXl3li EdRnr5/ArDzNXPLhJtWBbbUOhR1fcPnkVnrg0secWaBL0zsTVbT4wgca6Kuz6iy0 zqF5F2kTNvkURq84QaAjXYBJMS/SVhsjx/z1Rft1wDD73OF8cZ4OkPQNqyh9KcH7 yMWNh4vVQ4vFkV4SbcbGsi3j07VQWNHbrOnXa+L5gyQ7x1K/FHqXl+PJ/xZjlwKb 6WJNIhjJfhjeGQXRdKQZ+edTWAHeZOpII2tQKjcfI1FizhVukriQLLkJn7+SBW9h oc+HI7kEsqVqy/nEOMdQDGibOUNhtg01Ad5PPcDpjKlS49hnAWsE4A/xNwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL8fbNb6uV0kHNmsX4X00F+d5Y+bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2UzYzk3 MS01MzI0LTQxMzQtYmVhZC01OTdjNDM1OTg1NzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvZTNjOTcx LTUzMjQtNDEzNC1iZWFkLTU5N2M0MzU5ODU3Ny8xL3Z4OXMxdnE1WFNRYzJheGZo ZlRRWDUzbGo1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9nwMA0EAgACMAcDBQMqB4gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNAtDANBgkqhkiG9w0BAQsFAAOCAQEAb4iJ0+I8PHfZ 6RvP/KYn/RpFqwyfhVSp1VfTgSEdi0TyA/BqFulhttVcK5bsYnDmLkTvpJ6Ebw2t iFfY7YwzFg2vXZRvoMZxgqUNUVCnSnBJ2cPWPPki4QTLX5pf57BbFFMA8cICXWV7 A8LrjH+3TjxeczV3iGohyc3alvyXLBq7DQVhuaUuEPzK0gyVplMFYWQgABvL9DJN SFMORs8yvbXKEPMZY87oVD94+26EoZsLjIaTTGN7YlxeNVHdpKN1fOJXeyIaI16j cP/N2dCIfWiKEfkhjs63b3ONm/251rQm6GrMjfIrJsQgz2xA2z+HKPgKrRugGzeh /VLQNOVpSw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:39 2026 by rpki-client